Vulnerability record · CVE-2024-12433 · published 20 March 2025

CVE-2024-12433: Infiniflow ragflow deserialization of untrusted data vulnerability

Infiniflow · Ragflow

A vulnerability in infiniflow/ragflow versions v0.12.0 allows for remote code execution. The RPC server in RagFlow uses a hard-coded AuthKey 'authkey=b'infiniflow-token4kevinhu'' which can be easily fetched by attackers to join the group communication without restrictions. Additionally, the server processes incoming data using pickle deserialization via `pickle.loads()` on `connection.recv()`, making it vulnerable to remote code execution. This issue is fixed in version 0.14.0.

9.8 CVSS 3.0 Critical EPSS 1.7% · top 23.8% CWE-502 · Deserialization of untrusted data

9.8CVSS 3.0 base score

1.7%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References, 1 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Ragflow Infiniflow

References

Link	Tags
https://github.com/infiniflow/ragflow/commit/49494d4e3c8f06a5e52cf1f7cce9fa03cadcfbf6	Patch
https://huntr.com/bounties/8a1465af-09e4-42af-9e54-0b70e7c87499	ExploitThird Party Advisory

Track CVE-2024-12433 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-24770Infiniflow ragflow path traversal vulnerabilityRAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In version 0.23.1 and possibly earlier versions, the MinerU parser contains a …EPSS 1.4%27 Jan 2026 9.8CVE-2025-48187Infiniflow ragflow improper restriction of authentication attempts vulnerabilityRAGFlow through 0.18.1 allows account takeover because it is possible to conduct successful brute-force attacks against email verification codes to p…EPSS 0.54%17 May 2025 9.8CVE-2024-12450Infiniflow ragflow server-side request forgery (ssrf) vulnerabilityIn infiniflow/ragflow versions 0.12.0, the `web_crawl` function in `document_app.py` contains multiple vulnerabilities. The function does not filter …EPSS 1.3%20 Mar 2025 8.9CVE-2025-69286Infiniflow ragflow vulnerabilityRAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.22.0, the use of an insecure key generation algorithm i…EPSS 0.79%31 Dec 2025 8.9CVE-2025-27135Infiniflow ragflow sql injection vulnerabilityRAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. Versions 0.15.1 and prior are vulnerable to SQL injection. The ExeSQL componen…EPSS 0.62%25 Feb 2025 8.8CVE-2024-10131Infiniflow ragflow code injection vulnerabilityThe `add_llm` function in `llm_app.py` in infiniflow/ragflow version 0.11.0 contains a remote code execution (RCE) vulnerability. The function uses u…EPSS 1.1%19 Oct 2024 8.7CVE-2026-28797Infiniflow ragflow improper input validation vulnerabilityRAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions 0.24.0 and prior, a Server-Side Template Injection (SSTI) vulnerab…EPSS 0.56%3 Apr 2026 8.6CVE-2025-68700Infiniflow ragflow os command injection vulnerabilityRAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.23.0, a low-privileged authenticated user (normal login…EPSS 0.72%31 Dec 2025

Source: NIST National Vulnerability Database (record CVE-2024-12433), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.